Live data from Hacker News

WCry 2.0 functions perfectly under Wine

twitter.com

31–40 of 54 posts

Re: WCry 2.0 functions perfectly under Wine

#32

Wine has long been sufficiently compatible with Windows to run malware. I added a bit about this to the Wine FAQ in 2009 I think ;-) IIRC the ZeroWine malware analyser would run malware in Wine in Debian in a QEMU virtual machine. The question here is not whether it runs, but whether it can infect.

No, the more pressing question is whether it can run, specifically whether it can run without intervention, and I'm willing to bet a lot of money/bitcoins that it can't, purely because it couldn't gain access to the machine unless those ports were open.

Re: WCry 2.0 functions perfectly under Wine

#33
post #12

A good reminder to run wine as a different user...

I use a separate user session with a separate X server to run games, which is about 100% of my use of Wine. Granted, that's not out of paranoia, but because video mode switching makes my windows resize and go all over the place and sometimes the window manager crashes, so simply running a barebones OpenBox session specifically for games results in less pain than letting them run on my main desktop.

Re: WCry 2.0 functions perfectly under Wine

#36
post #4

Earlier quoted context omitted.

Isn't the entier fs exposed as Z: or so in wine? I know there's some way to get to the user's home directory which is probably good enough to cause essentially the same amount of pain.

> entier fs exposed as Z: or so in wine By default only. You can easily disable that. It always made me worried that anything in wine got access to my system, even though I normally wanted something closer to an isolated instance, so I always disabled that.

Wine is not an isolation layer. You can disable the Z: drive but the applications running in Wine still have about the same access a normal application has.

Re: WCry 2.0 functions perfectly under Wine

#38
post #2

That is pretty scary. Anyone know if there is any info on if it will only encrypt the c_drive folder that wine makes or the entire fs?

On that note, is is possible to sandbox wine so that it can only access the c_drive folder, not the whole host fs?

Re: WCry 2.0 functions perfectly under Wine

#40
post #2

That is pretty scary. Anyone know if there is any info on if it will only encrypt the c_drive folder that wine makes or the entire fs?

On that note, is is possible to sandbox wine so that it can only access the c_drive folder, not the whole host fs?

Yep. Try apparmor or similar.
Post reply on HN